🔒 Security & Privacy: Tornado Cash

Tornado Cash, the privacy‑enhancing mixer, remains a focal point for illicit finance despite regulatory crackdowns. In February, a Tectonic attacker routed 2,659 ETH (≈$3.6 million at current rates) through the platform, marking the highest single‑year hack volume for a privacy service. Earlier, Notional Finance’s escrow exploit saw $1.73 million laundered via Tornado Cash, underscoring the mixer’s continued role in moving stolen or sanctioned funds. These incidents reinforce the perception that privacy protocols are high‑risk vectors for money‑laundering regulators, prompting increased scrutiny from U.S. Treasury’s FinCEN and the EU’s AML directives. Consequently, liquidity in privacy coins (e.g., Monero, Zcash) may tighten as exchanges enhance KYC/AML checks, potentially diverting risk‑averse capital to regulated custodians and affecting market volatility. The persistence of such hacks signals that privacy tools will remain under regulatory pressure, while also driving developers toward more robust, permissioned solutions.